Verdict
Most signals looked ordinary, and some evidence was missing. Read the checks below before you pay or hand over personal details.
slerfwth.pages.dev is moderately trusted.
Evidence status and limitations
Evidence completeness: Not recorded
- The real-world operator identity was not independently verified.
- Module-level completeness metadata is unavailable for this legacy report.
At a glance
The checks that decide most of this verdict.
| Malware engines | 2 flagged itVirusTotal | Risk |
|---|---|---|
| Google Safe Browsing | Not listedGoogle | Clear |
| Abuse reports on the host | 0% confidenceAbuseIPDB, 0 reports; shared hosting inflates reports | Clear |
| Domain age | Not availableNo registration record was returned | Noted |
| Web archive | Never archivedNo public history of this site | Watch |
| Certificate | Encrypted connectionIssued by WE1 | Noted |
The page as captured
Key findings
- Automated classification: Sensitive Interaction Risk.
- At least one reputation service TrustSniffer consulted had flagged this domain at assessment time.
Full analysis
Overview
This website is a single-page site titled "SLERF Migration". It is served from a free project subdomain on a developer hosting platform. The captured homepage carries roughly three thousand characters of text and presents itself as a token-migration page. Its apparent purpose is to direct visitors toward a migration or claim flow for a cryptocurrency token. No independent confirmation was obtained that this flow belongs to any recognized project or operator.
Scam/Impersonation Risk
Contradictory signals are present. Several independent threat-intelligence engines currently rate the site as malicious, and an additional external blacklist listing corroborates this, so the site is blacklisted on reputation grounds. No conflicting legal identities and no confirmed brand impersonation were observed, but the migration-themed presentation matches a pattern commonly used to lure holders of a token into connecting wallets or approving transactions. The page's runtime behavior shows heavy outbound activity: 21 external data requests and 9 outbound POST submissions, several to destinations outside the commonly recognized service set. The page also logged repeated script errors. The sandbox did not observe wallet-connection attempts, clipboard manipulation, hidden forms, credential forms posting off-site, or content cloaking, so the available evidence shows a reputation-driven warning rather than a demonstrated drainer. The migration-themed free subdomain is nonetheless a high-risk archetype, and the outbound POSTs leave open where visitor data could be sent.
- Homepage reputation: two threat-intelligence engines flag the domain as malicious (59 rate it harmless), and an external blacklist listing is also recorded.
- Homepage behavior: 21 external XHR/fetch requests and 9 external POSTs across 3 sandbox runs; 3 POSTs and 3 XHR calls went to non-whitelisted destinations.
- Homepage runtime: 12 console errors were logged, with no cloaking, hidden forms, clipboard writes, or wallet-provider interaction detected.
Regulatory Verification Notes
The page was captured successfully, but the site's real-world operator has not been independently connected to any brand, company, or person. No regulated-entity status was identified, and no third-party broker record matched. This is a verification limit, not evidence of wrongdoing, and the reputational listings above are the main basis for caution. A migration or claim service that handles token holders' assets would ordinarily be expected to identify its operating entity, its project affiliation, and its official announcement channels. The captured page text gave no clear basis for tying the migration to a recognized issuer. The site's transport layer is technically sound, but that confirms only an encrypted connection, not trustworthiness.
- Homepage: titled "SLERF Migration"; the captured text did not establish an operating entity or a verifiable project affiliation.
- Hosting infrastructure: served from AS13335 (Cloudflare, Inc., US).
- Transport encryption: TLS certificate issued by WE1 at domain-validation (DV) level, valid to 2027-01-10. DV confirms only domain control, not organizational identity.
What to Verify Next
Any migration claim should be confirmed against the token project's official channels, reached independently of this page. That means the project's own verified announcements and a listing on a recognized token-tracking source, not links supplied by this site. The domain should be compared with the project's officially published addresses, because a free platform subdomain can be created by anyone. Any transaction request should be checked in a standalone transaction-simulation tool before anything is approved. The official support or contact channels should also be confirmed through an independent route.
- Homepage: the migration offer and its destination flow should be matched to the official project announcement.
- Hosting platform subdomain: the address format is open to anyone and carries no organizational vetting.
- Runtime behavior: the non-whitelisted outbound POST destinations remain unattributed and should be treated as unvetted data recipients.
Summary Verdict
The site has a mixed profile. Technically it behaves as a stable, normally functioning page, but corroborated adverse reputation findings override that and set a clearly cautionary posture. The site cannot be regarded as safe for sensitive interaction, and the limited identity evidence prevents any credit for legitimacy.
Infrastructure Integrity
The site is delivered through Cloudflare's CDN and WAF, and all observed addresses are edge servers. The origin host is not visible, so hosting cannot be independently verified. This is a mitigating factor only. Protective infrastructure shields the site from some technical attacks, but it does not vouch for the content it serves, and it cannot offset the external threat detections.
Closing Assessment
Interaction should be limited to passive viewing. Wallets should not be connected, transactions should not be signed, and credentials, seed phrases, and payment details should not be entered on this site until its legitimacy is confirmed through the project's official channels.
Written analysis generated 2026-10-22 by the TrustSniffer Analysis Engine from the evidence in this report.
What the analysis found
3 findings contributed to this verdict, raised by behaviour in a sandbox, external reputation, registration and ownership.
01 Behaviour in a sandbox
- The page sent data to a destination TrustSniffer does not recognise.Behaviour in a sandbox
rule:BEHAV_NONWHITELISTED_POSTS - The page produced an unusually high number of errors while it ran.Behaviour in a sandbox
rule:BEHAV_CONSOLE_ERRORS_HIGH - The page made many background requests to other domains while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_XHR_HEAVY - The page sent data to other domains many times while it was open.Behaviour in a sandbox
rule:BEHAV_EXTERNAL_POSTS_HEAVY
02 External reputation
- A small number of malware engines flagged this domain. On its own this is a weak signal.External reputation
rule:EXT_BLACKLIST_MEDIUM
03 Registration and ownership
- The public registration record for this domain is incomplete.Registration and ownership
rule:KF_WHOIS_INCOMPLETE
Identity verification
| Status | UNKNOWN |
|---|---|
| Identity score | 50/100 |
| Identity verification confidence | 30% |
- AI page analysis unavailable (page captured; identity not AI-verified)
Identity verification measures whether the site can be independently connected to a real-world brand or person. It is separate from the classification confidence.
What TrustSniffer observed
First-party facts recorded during the assessment of slerfwth.pages.dev.
- The request stayed on slerfwth.pages.dev. It was not redirected to another domain. Clear
- It is hosted on CLOUDFLARENET, from a server in US. Noted
Domain intelligence
| Registrar | Not available |
|---|---|
| Hosting | CLOUDFLARENET - Cloudflare, Inc., US |
| Country | US |
| Server IP | 2606:4700:310c::ac42:2f84 |
| Name servers | Not available |
| CDN / edge network | Detected (cloudflare) |
| Resolved IP addresses | 4 |
| Edge IP addresses | 4 |
| Likely origin IP addresses | 0 |
| SSL issuer | WE1 |
| SSL expiry | 2027-01-10 |
| Domain age | Not available (no registration date was returned) |
| Domain expiry | Not available |
| Archive first seen | Not available |
| Archive snapshots | 0 |
| Reputation | VirusTotal: 2 flagged | AbuseIPDB: 0% confidence, 0 reports | Google Safe Browsing: 0 matches |
About this assessment
A trust score summarises the evidence TrustSniffer could collect about slerfwth.pages.dev at assessment time. It is a starting point for your own judgement, not a guarantee: a high score means the signals were consistent with a legitimately operated site, a low or critical score means several risk patterns were present.
TrustSniffer assesses a website from the evidence it can collect at a point in time: domain registration and age, hosting and certificate, the content the site served, and third-party reputation feeds. A score is a summary of that evidence, not a guarantee and not a legal finding. There is no human rating and no user review in it. A site can change after it is assessed.